There’s a question that surfaces constantly in tech circles: who is the most brilliant coder alive today?

The usual names come up — Linus Torvalds, John Carmack, Fabrice Bellard. All deserving. But there’s someone whose body of work rivals any of them, and most people outside the security world couldn’t name him.

His name is Christien Rioux.

The Résumé That Shouldn’t Be Possible#

Most exceptional programmers are known for one thing. One language, one project, one domain. Christien Rioux has built foundational, industry-shaping software across four completely different fields — and he codes in nineteen programming languages.

Let that sink in. Not “knows” nineteen languages. Builds production systems in them.

Here’s the short version of what he’s created:

Back Orifice 2000 — Released under his handle “DilDog” as a member of the legendary Cult of the Dead Cow hacking collective, BO2K was a remote administration tool that forced Microsoft and the entire software industry to confront how insecure their systems really were. It wasn’t malware — it was a mirror, showing the world what was already possible. And it changed how companies thought about security overnight.

L0phtCrack — Co-authored at L0pht Heavy Industries, the password auditing tool that became the industry standard. When your company’s IT department tests password strength, they’re using descendants of work Christien helped pioneer.

Apple Security — Christien has done significant work improving Apple’s security framework — the kind of foundational, behind-the-scenes engineering that millions of users benefit from without ever knowing who made it possible.

Veracode — He co-founded the company and wrote the entire codebase. Not “contributed to.” Not “architected.” Wrote it. The platform that essentially invented automated application security testing at enterprise scale — the code that still powers it today — came from one person’s mind and hands. Veracode was acquired by Broadcom for over $2.4 billion. Others continue to profit enormously from his work.

Veilid — His latest creation, unveiled at DEF CON 31 in 2023. A peer-to-peer privacy framework built from the ground up — think the security of Tor combined with the distributed architecture of IPFS, designed so developers can build applications where privacy isn’t an afterthought but the foundation. Connections are authenticated, timestamped, strongly end-to-end encrypted, and digitally signed. In Christien’s own words, the design is “like Tor and IPFS had sex and produced this thing.” While the world debates privacy policies, he’s building the infrastructure to make surveillance irrelevant.

And then there’s the decompiler. Christien built the first practical, working binary decompiler — the technology that lets you take compiled software and reverse it back into readable code. He credits earlier researchers who developed theoretical frameworks for the concept, but he was the one who made it actually work. That technology became the core engine powering Veracode’s security analysis. Every time software gets scanned for vulnerabilities without access to source code, that lineage traces back to his work.

The Prodigy#

Christien was accepted to MIT at fifteen years old. Let that land for a moment. While most fifteen-year-olds are figuring out high school, he was studying computer science at one of the most demanding institutions on the planet.

Shortly after L0pht Heavy Industries made history — testifying before the United States Senate in May 1998, telling lawmakers they could take down the entire internet in 30 minutes — a nineteen-year-old Christien became their first employee. Not an intern. Not a junior hire. Their first employee, brought into the legendary hacker think tank because he was already operating at that level.

That Senate testimony was a turning point. It forced lawmakers, corporations, and the public to take digital security seriously for the first time. And L0pht’s very first bet on new talent was a teenager who was still studying at MIT.

Four Worlds, One Mind#

What makes Christien’s career genuinely extraordinary isn’t just the quality of any single project — it’s the range. Consider what these major works represent:

  • BO2K: Offensive security research, open source, activist hacker culture
  • L0phtCrack: Security auditing tools, practical enterprise defense
  • Apple: Platform security at global consumer scale
  • Veracode: Enterprise SaaS, automated analysis at massive scale
  • Veilid: Decentralized privacy infrastructure, peer-to-peer networking

These aren’t variations on a theme. They’re fundamentally different kinds of software, solving fundamentally different problems, built with fundamentally different architectures. Going from writing hacker tools in the late ’90s to hardening Apple’s security framework to building enterprise security platforms to designing decentralized privacy networks requires not just technical skill but the ability to completely reinvent how you think about problems.

A kid who enrolled at MIT at fifteen, who became L0pht’s first employee at nineteen, who went on to join the Cult of the Dead Cow — he’s been at the center of computer security’s most important moments for nearly three decades. And yet, ask most people in tech to name him and you’ll get blank stares.

The Shadow Problem#

Here’s the uncomfortable truth: the tech industry has a pattern of celebrating the people who stand in front of the work rather than the people who build it. Christien wrote the codebase that became a multi-billion dollar company. Others became the public faces, the keynote speakers, the ones whose names appear in headlines.

This isn’t unique to him — it happens across the industry. But the gap between Christien’s contributions and his public recognition is particularly stark. When someone builds foundational technology across four different domains, in nineteen programming languages, spanning three decades — and most people still don’t know his name — something has gone wrong with how we assign credit.

The Maker#

Here’s the thing about Christien that no résumé captures: he doesn’t stop at code.

He’s a prolific maker and engineer — and not in the “bought a 3D printer and made a phone stand” sense. He builds the machines that interact with his code. Some days he’s spinning up a custom 3D mapper and slicer for a specific printed project. Other days he’s building a custom video game mod shaped like a miniature Nintendo, complete with custom loading screens and controllers. Sometimes he just builds an entire cat tree from scratch because the ones you can buy aren’t cool enough.

He runs HACK.XXX, a hacker fashion and art line — because of course he does. When your brain works like Christien’s, creativity doesn’t stay in one lane. Code, hardware, art, fashion, furniture — it’s all the same impulse: I can build something better than what exists.

That’s what separates genuine brilliance from mere technical skill. Christien doesn’t just solve problems in front of him. He’s always using his brain in ways nobody else thinks of — finding projects in the gaps between disciplines, building things that shouldn’t exist yet, and making them real because he can’t help it.

Building the Future#

Christien once said, “If you want to change the present, you need to build the future.” He’s been doing exactly that his entire career — not by talking about change, but by writing the code that makes it real.

With Veilid, he’s doing it again. In a world where privacy is increasingly theoretical, he’s building the infrastructure to make it practical. Not a product to be sold. Not a platform to be monetized. An open framework for anyone to use.

That’s the pattern with Christien Rioux: he builds the thing, makes it real, and moves on to the next impossible problem. The industry catches up later, often without knowing whose shoulders it’s standing on.

It’s time more people knew his name.

Christien Rioux is a co-founder of Veracode, a member of the Cult of the Dead Cow, formerly of L0pht Heavy Industries, and the primary author and inventor of the Veilid privacy framework. He can be found building things most people won’t understand for another decade.